BGS should be able to take over whitelisting if the user had already been allowed globally via ABQ and has gatekeeping profile assigned.

More...